$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: uHSK1xsV6imQUmHsiURWvPRmy2qLHbeELMV+lJ4bmI8= Subject key identifier: 08:54:78:30:31:20:32:BA:E3:F6:9B:9B:B4:38:32:96:AE:C1:F4:F2 Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 0A662749028CDD44467352FCCBDAADAFF71E8004 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 12:14:43 +0000 Manifest this update: Fri 17 Apr 2026 12:09:43 +0000 Manifest next update: Sat 18 Apr 2026 13:22:43 +0000 Files and hashes: 1: 3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa (hash: Bj7faP7dbLHP8DKHtGy7odbPHjPoUjxSJmi90LoGi/o=) 2: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: G3GoBf6Pax8Bw1gbDfKLaazuYau3wCoJ3ra0M/kk+b0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:66:27:49:02:8c:dd:44:46:73:52:fc:cb:da:ad:af:f7:1e:80:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Apr 17 12:09:43 2026 GMT Not After : Apr 18 13:22:43 2026 GMT Subject: CN=08547830312032BAE3F69B9BB4383296AEC1F4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:55:a4:50:15:38:7a:1a:ef:e0:82:dc:0b: 8b:a0:7e:4d:5f:3f:1b:bc:2f:4a:ae:fb:2d:9d:63: d2:93:a8:a5:2b:e0:3b:b8:c0:58:d8:7f:17:86:30: dc:25:1c:9d:66:30:04:51:e9:0a:8d:d0:53:56:34: 93:74:59:1f:b5:75:87:ec:24:ae:30:37:84:2e:71: 2f:b4:76:d2:e5:9d:87:e7:e8:f6:6a:71:9e:90:3b: 54:c8:11:78:11:65:4f:4f:ad:e6:9b:f2:ec:bf:5a: 84:c6:6b:29:3d:41:75:c5:c6:2e:3e:5e:07:e1:01: cd:d6:7f:cc:1b:63:42:ce:c9:f7:df:f1:58:65:46: 89:04:89:73:c5:e3:7a:85:4e:5b:c7:a5:38:2b:c4: b7:8d:42:84:ad:21:a7:34:e2:c0:41:a9:12:83:64: 6a:87:61:46:ef:e4:dd:25:f5:7b:36:70:b1:d6:6b: 55:b9:cd:27:f2:08:9e:db:19:4b:c1:c3:2b:99:7f: 7b:33:7c:24:2c:be:73:65:8e:f4:6c:46:96:2f:e4: 50:fc:fe:af:31:41:86:52:2c:f2:e4:2b:77:18:3e: 4c:9c:ea:85:c1:44:dd:ed:ed:b5:c4:92:9a:80:d7: 3b:38:ce:be:eb:06:c0:a6:11:c4:63:69:27:73:ee: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:54:78:30:31:20:32:BA:E3:F6:9B:9B:B4:38:32:96:AE:C1:F4:F2 X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:45:79:4b:5c:7e:f7:10:d6:6c:ce:5c:d7:c9:01:7b:dd:cf: 23:c1:7d:5e:cb:00:f4:7f:57:da:56:27:0f:b4:6f:fa:4a:37: e2:b4:59:7d:4e:db:51:81:74:60:ad:38:78:4b:88:4a:92:b3: a9:ec:69:a2:dd:f8:c4:dc:c4:71:61:e3:f7:cd:ba:52:dc:7c: d1:64:4d:a1:90:49:22:52:08:1f:8e:e1:60:cc:99:71:6c:c3: 9c:50:18:7a:0c:49:d9:fd:bc:7f:8e:b3:8b:77:cb:37:34:69: 8a:63:34:d7:e3:d9:e1:b9:ba:30:b1:62:63:46:d0:81:19:4d: 5c:ac:dd:7a:0a:87:b2:ff:44:37:75:48:a7:6d:c8:ba:29:86: e2:ad:17:cb:94:c5:b0:50:e2:4d:93:07:7f:0a:47:f9:5d:97: 8a:ba:ed:74:46:00:74:45:df:e0:71:e6:36:55:91:ea:94:8e: 04:58:c8:ea:19:f4:ce:59:12:48:37:b7:0d:e4:4e:ff:63:e6: 95:68:aa:65:42:f7:82:cf:48:66:ec:c2:71:7e:5a:f0:b2:e6: 23:dc:84:6d:e5:35:ce:fb:8a:85:8b:b3:23:30:03:9b:ca:74: 36:ed:6b:9f:36:ed:5f:19:52:75:f7:86:54:64:1f:86:f5:04: 65:39:17:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCmYnSQKM3URGc1L8y9qtr/cegAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjA0MTcxMjA5NDNaFw0yNjA0MTgxMzIyNDNaMDMxMTAvBgNV BAMTKDA4NTQ3ODMwMzEyMDMyQkFFM0Y2OUI5QkI0MzgzMjk2QUVDMUY0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjVWkUBU4ehrv4ILcC4ugfk1f Pxu8L0qu+y2dY9KTqKUr4Du4wFjYfxeGMNwlHJ1mMARR6QqN0FNWNJN0WR+1dYfs JK4wN4QucS+0dtLlnYfn6PZqcZ6QO1TIEXgRZU9Preab8uy/WoTGayk9QXXFxi4+ XgfhAc3Wf8wbY0LOyfff8VhlRokEiXPF43qFTlvHpTgrxLeNQoStIac04sBBqRKD ZGqHYUbv5N0l9Xs2cLHWa1W5zSfyCJ7bGUvBwyuZf3szfCQsvnNljvRsRpYv5FD8 /q8xQYZSLPLkK3cYPkyc6oXBRN3t7bXEkpqA1zs4zr7rBsCmEcRjaSdz7pr5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCFR4MDEgMrrj9pubtDgylq7B9PIwHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikV5S1x+9xDW bM5c18kBe93PI8F9XssA9H9X2lYnD7Rv+ko34rRZfU7bUYF0YK04eEuISpKzqexp ot34xNzEcWHj9826Utx80WRNoZBJIlIIH47hYMyZcWzDnFAYegxJ2f28f46zi3fL NzRpimM01+PZ4bm6MLFiY0bQgRlNXKzdegqHsv9EN3VIp23IuimG4q0Xy5TFsFDi TZMHfwpH+V2XirrtdEYAdEXf4HHmNlWR6pSOBFjI6hn0zlkSSDe3DeRO/2PmlWiq ZUL3gs9IZuzCcX5a8LLmI9yEbeU1zvuKhYuzIzADm8p0Nu1rnzbtXxlSdfeGVGQf hvUEZTkX8A== -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:22 2026 by rpki-client